5. CONCLUSIONS
Case studies have often been recognized as important tools to
illustrate conceptual or complex materials. Teaching
information security skills effectively is difficult without ready
access to adequate case studies. Often, a real-life information
security situation is complicated and involves numerous steps.
It can be challenging for instructors to describe such complex
security situations orally in class. It can also be hard for
students to understand complex security techniques and
concepts without being offered visual examples. In this paper,
we developed two workflow-based case studies using Kepler
software to simulate real-life scenarios in information security.
The two workflow-based scenarios were then introduced to
students in both undergraduate- and graduate-level courses.
The evaluation results show that most of the students were
positive regarding the effectiveness of using workflow to teach
security techniques and concepts. A limitation with this
evaluation is that the sample size is small. The authors hope to
conduct a large-scale evaluation with more students in the
future, in order to further improve and enhance the case studies
implemented by workflow.